Infrastructure Security Engineer: Cloud, SIEM & EDR Expert

Jobtailor; Toronto; On-site; CAD 110,000 - 160,000; Full time

Job summary

Jobtailor is seeking a senior cybersecurity professional to safeguard and improve the company's infrastructure across on-premises and cloud environments. You will own vulnerability management, SIEM operations, endpoint security, and incident response, coordinating with IT, engineering and operations.

Key responsibilities include securing AWS/Azure environments, implementing CIS/NIST controls, and communicating risks to both technical and non-technical stakeholders.

Qualifications

• 7+ years of progressive cybersecurity experience with hands-on infrastructure security roles.
• Hands-on knowledge across Windows, Linux, networking, cloud, and enterprise IT environments.
• Experience operating enterprise vulnerability management platforms, including scanning, analysis, prioritization, and remediation.
• Experience with SIEM and security monitoring, including log analysis, detection use cases, and monitoring.
• Experience with endpoint security and EDR/XDR; alert investigation and containment.
• Strong understanding of network security concepts including firewalls, segmentation, IDS/IPS, secure protocols.
• Experience supporting cybersecurity incident investigations and remediation.
• Experience securing AWS and/or Microsoft Azure.
• Knowledge of infrastructure and OS hardening; secure configuration practices.
• Knowledge of NIST CSF, SP 800-171, SP 800-53, and CIS Controls/Benchmarks.
• Understanding of IAM, privileged access, authentication, authorization, and least-privilege principles.
• Ability to communicate risks and recommendations to technical and non-technical stakeholders.
• Strong problem-solving, ownership, and accountability.
• Excellent organizational skills and multi-priority management.
• Ability to work independently while collaborating across teams.
• Ability to obtain Government of Canada security clearance.

Responsibilities

• Protect Kepler's corporate, cloud, and operational infrastructure.
• Own, operate, and improve vulnerability management, SIEM, endpoint security, hardening, and incident response capabilities.
• Provide security engineering for infrastructure, cloud environments, networks, systems, and related technologies.
• Review architectures, identify security risks, and recommend practical controls and mitigation measures.
• Assess and improve controls across networks, servers, operating systems, cloud infrastructure, databases, firewalls, identity systems, and other infrastructure technologies.
• Develop and maintain secure configuration and system-hardening standards based on CIS Benchmarks and NIST guidance.
• Integrate security requirements into infrastructure design, implementation, and operational processes.
• Manage vulnerability scanning, findings analysis, risk prioritization, remediation coordination, metrics, and vulnerability management technologies.
• Own SIEM and monitoring capabilities, onboard log sources, develop and tune detection use cases, monitor visibility, and coordinate with MDR/SOC providers.
• Own endpoint security and EDR/XDR capabilities; investigate alerts and support containment, remediation, and recovery.
• Contribute to cybersecurity incident investigations, containment, remediation, recovery, evidence collection, and post-incident reviews.
• Assess and secure AWS and/or Microsoft Azure environments, including IAM, logging, network security, and automation opportunities.
• Support Government of Canada and regulated-environment security requirements, assessments, audits, inspections, certification activities, remediation, and control documentation.
• Report to the VP, Information Security & CISO and collaborate with IT, Engineering, Operations, Security, Facilities, program teams, and external providers.

Skills

Cybersecurity expertise

Vulnerability management

SIEM & monitoring

Cloud security (AWS/Azure)

Incident response & investigations

Network security concepts

IAM & Privileged Access

OS hardening & secure configurations

NIST CSF / 800-171 / 800-53 / CIS

Problem-solving & ownership

Tools

EDR/XDR tools

Vulnerability management platforms

SIEM platforms / Log analysis

Job description

Jobtailor is seeking a senior cybersecurity professional to safeguard and improve the company's infrastructure across on-premises and cloud environments. You will own vulnerability management, SIEM operations, endpoint security, and incident response, coordinating with IT, engineering and operations.

Key responsibilities include securing AWS/Azure environments, implementing CIS/NIST controls, and communicating risks to both technical and non-technical stakeholders.